Professional Cloud Security EngineerDemo

Question

You intend to synchronize identities to Cloud Identity from a third-party identity provider (IdP). You found that some employees used their corporate email addresses to create consumer accounts for access to Google services. You must ensure the organization controls the configuration, security, and lifecycle of these consumer accounts.

What should you do?

Choose two

A Mandate that those corporate employees delete their unmanaged consumer accounts.
B Reconcile accounts that exist in Cloud Identity but not in the third-party IdP.
C Evict the unmanaged consumer accounts in the third-party IdP before you sync identities.
D Use Google Cloud Directory Sync (GCDS) to migrate the unmanaged consumer accounts' emails as user aliases.
E Use the transfer tool to invite those corporate employees to transfer their unmanaged consumer accounts to the corporate domain.

Explanation

The transfer tool invites each unmanaged-account owner to consent to transferring the consumer account into a managed Cloud Identity account, which gives the organization control of the account and its associated data. In a federated environment, managed accounts that lack a corresponding third-party IdP identity must be reconciled so that they are not treated as orphaned and suspended or deleted. Migrate consumer accounts, Assess the impact of user account consolidation on federation

Learn more

Professional Cloud Security EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ75

Community Discussion